rayelliott
/
barrier
mirror of https://github.com/debauchee/barrier.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

lib/net: Present client certificate when connecting to server

This commit is contained in:
Povilas Kanapickas 2021-11-01 04:50:07 +02:00
parent 92ba6f61e6
commit 4d73ed9fdd
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
doc/newsfragments/client-send-certificate.feature Normal file
View File

@ -0,0 +1 @@
Barrier client now sends certificate that the server can verify.

8
src/lib/net/SecureSocket.cpp
View File

@ -462,9 +462,13 @@ SecureSocket::secureAccept(int socket)
int int
SecureSocket::secureConnect(int socket) SecureSocket::secureConnect(int socket)
{ {
createSSL(); if (!load_certificates(barrier::DataDirectories::ssl_certificate_path())) {
LOG((CLOG_ERR "could not load client certificates"));
// FIXME: this is fatal error, but we current don't disconnect because whole logic in this
// function needs to be cleaned up
}
load_certificates(barrier::DataDirectories::ssl_certificate_path()); createSSL();
// attach the socket descriptor // attach the socket descriptor
SSL_set_fd(m_ssl->m_ssl, socket); SSL_set_fd(m_ssl->m_ssl, socket);